pathprober

pathprober Probe and discover HTTP pathname using brute-force methodology and filtered by specific word or 2 words at once. Purpose Brute-forcing website directories or HTTP pathname and validate using HTTP response code is not relevant anymore. This tool will help you to perform a penetration...

novahot

novahot novahot est un framework de webshell pour les testeurs d'intrusion. Il implémente une API basée sur JSON qui peut communiquer avec des trojans écrits dans n'importe quel langage. Par défaut, il est livré avec des trojans écrits en PHP, Ruby et Python. Au-delà de l'exécution de commandes...

TinkererShell

TinkererShell A simple reverse shell written in python 3.7 just for fun. Actually it supports Windows and Linux OS and integrates some basic features like keylogging and AES encrypted communications. Supported operating systems: Windows Linux OSX Functions and characteristics: Reverse connection...

atomic-operator

license atomic-operator Ce package Python permet d'exécuter les tests Atomic Red Team Atomiques sur plusieurs systèmes d'exploitation. Quoi de neuf ? Pourquoi ? atomic-operator permet aux professionnels de la sécurité de tester leurs capacités de détection et de défense face aux techniques défini...

BlackMamba

BlackMamba Command and Control What's BlackMamba? Black Mamba is a Command and Control C2 that works with multiple connections at same time. It was developed with Python and with Qt Framework and have multiples features for a post-exploitation step. Some Features Multiple clients. Real-time...

authcov

AuthCov Web app authorisation coverage scanning. Introduction AuthCov crawls your web application using a Chrome headless browser while logged in as a pre-defined user. It intercepts and logs API requests as well as pages loaded during the crawling phase. In the next phase it logs in under a...

PhoenixC2

PhoenixC2 An Open-Source C2-Framework written in pure Python3. Disclaimer This project is still in development and not ready for professional use. The author and its affiliates do not endorse or condone any illegal or malicious activity conducted with this framework. Users of this framework are...

cve-2025-33073

Hello! I am an AI! Calm down! It's just a joke, actually I'm not an AI, it's a mockery of the metro announcer in my city who sounds like one. There are also people who act like an AI: nice, smiling, fulfilling all social standards, but inside you feel something superficial and without any feeling...

aws-recon

AWS Recon A multi-threaded AWS security-focused inventory collection tool written in Ruby. This tool was created to facilitate efficient collection of a large amount of AWS resource attributes and metadata. It aims to collect nearly everything that is relevant to the security configuration and...

riskscanner

Open source multi-cloud security compliance scanning platform Chinese Version RiskScanner is an open source multi-cloud security compliance scanning platform, Based on Cloud Custodian、Prowler and Nuclei engines, it realizes security compliance scanning and vulnerability scanning of mainstream...

PT-2026-104126

Name of the Vulnerable Software and Affected Versions Dc Woocommerce Multi Vendor versions prior to 5.0.19 Description An issue exists where authenticated attackers with vendor-level access or higher specifically those with the edit stores capability can perform SQL Injection. This occurs because...

Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : GStreamer Bad Plugins vulnerability (USN-8855-1)

The remote Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8855-1 advisory. It was discovered that GStreamer Bad Plugins incorrectly validated the size of multi-channel audio...

0-click-RCE-Exploit-for-CVE-2024-50526

CVE-2024-50526 / 0-Click RCE Exploit Author: Joshua Provoste https://x.com/JoshuaProvoste/status/1859403137435459727 This repository contains a proof-of-concept exploit for CVE-2024-50526, an unauthenticated arbitrary file upload vulnerability in the Multi Purpose Mail Form WordPress plugin,...

ThreatLens

Investigate IPs, domains, hashes, and CVEs across 6 free threat intel APIs — without switching between browser tabs. Quick Start · Usage · Architecture · API Keys · Screenshots · Contributing 🚀 Proudly featured in the official Awesome OSINT repository. 📖 Overview ThreatLens is a single command-li...

CVE-2026-87796

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-87796 CVE-2026-87796 Multi Uploader for Gravity Forms 1.1.9 - sh1zen I am @abraxasnull. Loopback lab. The client is CVE-2026-87796-Abraxas-Labs.py. The advisory named a method. movefile is a private PHP...

agentZ

제로 트러스트 에이전틱 AI 플랫폼 AI 에이전트를 구축하고, 실행하고, 관리하세요. 설계 단계부터 안전하게. 모든 에이전트는 기본 거부 샌드박스 내에서 실행되며 자격 증명을 절대 받지 않습니다. 모든 에이전트 작업은 추적 가능합니다. AgentZ는 AI 에이전트를 실행하기 위한 멀티테넌트 플랫폼입니다. 강력한 격리 보장, 에이전트에 대한 자격 증명 노출 제로, 기본 거부 네트워크 태세, 그리고 에이전트가 접근할 수 있는 소프트웨어 패키지에 대한 제어를 제공합니다. 웹사이트 : AgentZ 랜딩 페이지. DeepWiki :...

CVE-2026-104181

Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.13.3 and 5.8.3, app-based multi-factor authentication management actions do not consistently require confirmation of the current password. An attacker with access to an authenticated user...

memgrep

Memory grep Утилита для поиска по памяти в нескольких процессах Выпущена как открытое ПО компанией NCC Group Plc - http://www.nccgroup.com/ Разработана Ollie Whitehouse, ollie dot whitehouse at nccgroup dot com https://github.com/nccgroup/memgrep Выпущена под лицензией AGPL, см. LICENSE для...

CVE-2026-104181

The Filament full-stack components for Laravel are vulnerable in versions 4.0.0 through 4.13.3 and 5.8.3 . The root cause is that app-based multi-factor authentication (MFA) management actions do not consistently require the current password for confirmation. An attacker with access to an authent...

CVE-2026-104181 Filament: Multi-factor authentication (app) management actions do not require password reauthentication

Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.13.3 and 5.8.3, app-based multi-factor authentication management actions do not consistently require confirmation of the current password. An attacker with access to an authenticated user...